Squid MITM Problem
-
Hi i have pfsense+ transparent squid proxy installed on it. Squid is configured to log https sites too. Everything works good but sometimes users have ERROR_SSL_PROTOCOL_ERROR. DNS query forwarding is enabled. in Real-Time monitoring lots of error:transaction-end-before-headers
Here is my config
-
@dochy Nice Config,
This is mine, I set specific devices to splice as source,
I have a regex list saved in /usr/local/pkg/url.nobump
after I peak at step1
splice the source addresses like the game system and tablets
after I splice the URLs I have marked as trusted like banks,and I bump everything else.
This is my custom file I have items that won't work correctly with bump like antivirus, some updates, itunes etc.The main sites I want bumped are sites I do not normally go to, random sites this way it still stops viruses with HTTPS being checked.
I hope that helps as it seems like you have some 409 errors look up the server errors "The HTTP 409 status code (Conflict) indicates that the request could not be processed because of conflict in the request"
These sites I would look into splicing if you need them, teams is one I splice its so slow without it.